MAL-2025-71124 Malicious code in thoughtful-moccasin-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08f6accd6026252175134c0f62b084e3b62f12924f7763063592b649c59823c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suspicious-lime-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9e4111f5b9862c31b13fb6ae60bced740193fe0b07264e7267afbf32a1c68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-getas37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41c427b0bd2614d37ec9cc5b17c1ea8091f0a680947ea5b08399922558dda063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-kripik47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9952420f1d8556e39a417e2963fb16e277ddccc45d73e1756d8d16deaf5d4f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-gaplek77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e3db29ebf3c6e5decb07e9dabd91161c9f230f79277ba04f173ece1e34eb49f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in competent_tapir_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a691cf59266fd8e05a1b30e347c208c9e374253cb60b5a95eac5740f8e3b5554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qualified_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7ae34f69681b42493995fc1da1ce31eb3b3fc54dc11ea9c0cdc856033ed446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-kupat67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81b0af4351858c7a4b247956cfd411f0484e6d124e3ebb0bf6f071d9d981a374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in careful_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 087366e6e66b87740640e563ffb9d579d739bab5d93799e9aafb50f5b523907b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf2e5f0df41e54148e10935397d2a9d387af444d0c769d3465b7dc50b909e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-mangut51-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8500d31387a65b528cb3f3a5900089d1beef79b8084b534376e249a6fb9f1677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-gandul76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f59126bc23d5a9f7adb11fb629588efcb9939d350d990f7cad7902393535a0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-nasi16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9a6c29825226384b69811609992bdaad6720e2ce9e4134716813e939b5f3e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-jengkol10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 309ca787988b0b0c5a2d4bd87ea69a4d259719a012bb96d8d7f4c3e5149ec235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-tongseng44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e87bf5e97265293c88688952dfe1ade31193e7921c220d4876235b70136f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-naget6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a314788d882237044c6e839d5b0bf5130fbec58b9d7e7252b64e30d55e4b326b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-enting72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc0ff1b13b4e1e1c229a1d2f0e5030ce5872e87e2f25125563c6a80c950d917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-mangut26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba3c3abfc65c5b779ae744d29eb859ca00735f6a7044d916fa09eb2dc1626df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-mangga74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b425f658b206cd98d3adf2d3e76ac8c030d9af6f58e73c8ccd46792e6deae01b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-kue26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9133a8c4dc7b0d04c83451b5c00d9cb6250cfc8c8f0e2f9d5bd68b06057166f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...